Recently, everyone has been rushing to buy hardware wallets, and they’re sold out... Awareness of security has increased, but I think many people missed a more everyday pitfall: the “unlimited” contract authorization. At the time, it was just for convenience to click once, and then they forgot about it. It’s been hanging there ever since, and if something goes wrong (there have been a lot of phishing links lately), you might not even know where your assets were taken from.

My current habit is: after using a certain DEX/airdrop page, I promptly revoke the authorization, just like locking the door before bed—if I don’t do it, I don’t feel at ease. Anyway, I can’t always predict big fluctuations, but when it comes to risk control, if I can do something in advance, I won’t delay. Today, I revoked a few old authorizations again, just for peace of mind. That’s how I do it for now.